Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/058CF01AF6EF11EEB798753CC4F9AE02.roa
File: 058CF01AF6EF11EEB798753CC4F9AE02.roa (raw, json)
Hash identifier: d88VUb5bfEbVUjZzfOOTZpcT9G3KTFi+dPmAXPFQ7/I=
Subject key identifier: 4E:BE:7C:4F:80:96:0D:F0:4D:2B:14:2C:EF:4F:B0:40:F0:BF:7D:37
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: BD
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/058CF01AF6EF11EEB798753CC4F9AE02.roa
Signing time: Wed 10 Apr 2024 04:01:35 +0000
ROA not before: Wed 10 Apr 2024 04:01:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 155.60.128.0/24 maxlen: 24
155.60.136.0/24 maxlen: 24
155.60.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 08:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Apr 10 04:01:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66160f1e-4dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:dc:1c:7a:bb:58:e0:af:c0:06:e3:22:e3:
f3:d6:6a:bc:32:c1:96:33:67:73:fa:aa:11:2f:92:
1e:95:3c:dd:ce:f7:6e:15:95:ce:ff:7b:0e:cb:47:
1d:45:e5:36:31:65:dd:83:e7:2c:a8:a1:ea:c4:a6:
b6:92:7e:a9:da:9e:59:cb:e4:05:0e:a7:ff:b0:9f:
f5:dc:7a:96:f2:9c:85:0f:d9:50:76:27:a2:73:f3:
70:b2:f9:cf:5b:e6:c2:3e:74:01:c1:c1:60:60:1d:
f6:94:56:78:1a:1d:d3:51:ca:38:44:3b:6c:ee:a2:
5b:60:8c:6c:77:b2:e0:b7:99:e0:e4:77:1a:53:76:
e3:f5:ef:9e:a8:fe:6b:77:59:bb:73:ee:02:73:f2:
39:8a:e2:53:08:d6:3d:b0:a7:c7:39:84:d6:36:05:
8a:1d:45:4f:aa:0e:e3:7e:43:f1:48:ee:c8:f1:b8:
db:5e:18:0f:56:a0:4d:1e:20:ec:04:87:8f:2c:7c:
92:70:fe:09:0e:70:98:d8:17:2e:91:cc:37:96:89:
c4:d9:56:02:d2:6f:04:b3:7e:47:e5:4c:13:6b:20:
4a:84:85:37:41:12:f4:fc:ad:ac:e3:74:bf:7a:10:
d4:2d:1e:cc:c5:20:7a:e5:d0:1a:13:87:29:00:95:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BE:7C:4F:80:96:0D:F0:4D:2B:14:2C:EF:4F:B0:40:F0:BF:7D:37
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/058CF01AF6EF11EEB798753CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.60.128.0/24
155.60.136.0/23
Signature Algorithm: sha256WithRSAEncryption
06:f0:16:20:60:b9:16:4c:9d:2b:fc:04:5e:6f:3c:5d:f0:ec:
7a:8c:dd:3c:62:97:f5:9f:aa:90:4f:e6:86:17:0c:3d:41:b7:
e7:4b:9c:61:3f:d7:20:75:aa:74:5b:99:62:15:c5:b7:76:0e:
30:74:28:73:53:d9:5d:c7:6b:ff:89:96:6a:c8:0c:69:27:28:
f6:49:e4:46:a9:59:d5:18:f0:bb:83:cd:93:22:4d:13:1a:69:
81:d3:0a:b8:3c:e2:8e:6a:31:4f:09:e4:af:b9:39:8d:34:83:
85:67:50:c3:86:f6:7b:ee:5d:5a:8b:85:37:73:26:97:ad:c0:
87:74:a2:11:0f:0c:a1:18:05:d7:ff:43:57:43:0d:7a:cc:e8:
e4:4c:6f:fd:c0:a1:b0:17:21:1b:24:8d:ef:41:f2:9a:97:a3:
04:5b:24:f1:4a:39:0a:8d:3e:b3:b7:4a:27:e9:d9:e0:a5:c6:
53:6f:ba:7e:36:ab:c5:b5:21:af:55:06:fe:b7:4b:23:9e:4e:
13:f9:7a:da:00:f6:b6:e7:77:9e:28:12:71:c5:92:9f:a7:9e:
fd:05:0d:b8:8a:a3:1d:b3:a1:63:db:ca:1f:fa:61:0e:4d:a4:
92:be:9e:c9:f8:a3:f1:ca:99:74:91:a2:83:ca:4b:6a:4c:bc:
9b:9b:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 11:03:12 2024 by rpki-client on console-ams.rpki-client.org